MintGarden

Browse and search Chia NFTs and collections, view stats, trade history, recent sales, trending data, and user profiles via MintGarden API.

Security Scan

The MintGarden skill is an internally consistent MintGarden API client/CLI for browsing Chia NFTs; it makes expected network calls to api.mintgarden.io and does not request extra credentials or suspicious permissions, with only a few small documentation/code inconsistencies to note.

Purpose & Capability

The package, SKILL.md, README, and source files consistently implement a MintGarden API client and CLI for searching collections, NFTs, profiles, events, and stats. The code calls the MintGarden API (https://api.mintgarden.io) and exposes CLI commands matching the documented commands. No unrelated services, cloud credentials, or binaries are requested.

Instruction Scope

Runtime instructions (SKILL.md) describe CLI/agent usage and an optional MINTGARDEN_API_URL env var. The code implements the documented API client and command handling. Two small scope mismatches: (1) SKILL.md documents an optional MINTGARDEN_API_URL environment variable, but the code (index.js + lib/api.js) does not read process.env.MINTGARDEN_API_URL when constructing the client (the API class accepts a constructor param but index.js instantiates it with no env var), so the documented env var is ineffective; (2) SKILL.md mentions Telegram integration; the code provides CLI/handleCommand functions but contains no direct Telegram bot code — Telegram support is expected to be provided by the surrounding Clawdbot/agent platform. Neither mismatch indicates malicious behavior but they are usability/integration inconsistencies.

Install Mechanism

There is no platform install spec (install is not auto-declared), but an install.sh and package.json are included. install.sh runs npm install --production and is straightforward. Dependencies are standard (axios). No downloads from arbitrary URLs, no archives extracted, and no exotic install steps were used.

Credentials

The skill declares no required environment variables or credentials, and the code does not request secrets. The only network target is the public MintGarden API. The SKILL.md optional environment variable (MINTGARDEN_API_URL) is not actually consumed by the code, an inconsistency but not a credential risk.

Persistence & Privilege

The skill does not request persistent elevated privileges or 'always' inclusion. It is a normal runtime skill (user-invocable, agent-invocable). It does not modify other skills or system-wide config. Installation writes typical node modules only if you run npm install.

Assessment

This skill appears to do what it says: a MintGarden API client/CLI that talks to https://api.mintgarden.io. Before installing, consider: - The SKILL.md mentions an optional MINTGARDEN_API_URL env var, but the shipped index.js constructs MintGardenAPI() without reading process.env; if you need to point the skill at a different base URL you would need to modify the code or the constructor call. - The CLI lowercases incoming commands (index.js lowercases the entire input). That could alter case-sensitive IDs or metadata in some edge cases (verify behavior with your IDs). - Telegram integration is referenced in docs but not implemented in the code — expected to be provided by the agent/platform wiring. - The package requires npm install (and will install axios and its normal transitive deps). Review the package-lock.json and run npm audit if you want to check for dependency vulnerabilities. - The skill makes outbound network calls to api.mintgarden.io; if you need to restrict network access, run it in an environment that enforces outbound controls. If these points are acceptable, the code shows no signs of credential exfiltration or contacting unexpected endpoints. If you want stronger assurance, run the skill in a sandbox, inspect network traffic during use, or patch the code to honor a MINTGARDEN_API_URL environment variable if you require a custom endpoint.

MintGarden Skill

Browse, search, and analyze Chia NFTs via the MintGarden API.

What It Does

• Search NFTs and collections
• View collection stats, floor prices, trading volume
• Track NFT ownership and trade history
• Monitor recent sales and activity
• Get trending collections and top traders
• Access profiles and portfolios

Commands

All commands can be triggered via:

• /mg <command> in Telegram
• /mintgarden <command> in Telegram
• mg <command> in CLI
• mintgarden <command> in CLI

Search

/mg search <query>              # Search everything
/mg search nfts "rare zombie"   # Search NFTs only
/mg search collections "pixel"  # Search collections only

Collections

/mg collections list            # Top collections by volume
/mg collection <id>             # Collection details
/mg collection nfts <id>        # NFTs in collection
/mg collection stats <id>       # Collection statistics
/mg collection activity <id>    # Recent sales/transfers

NFTs

/mg nft <launcher_id>           # NFT details
/mg nft history <launcher_id>   # Trade history
/mg nft offers <launcher_id>    # Active offers

Profiles

/mg profile <username>          # Profile details
/mg profile nfts <username>     # User's NFTs
/mg profile activity <username> # User's recent activity

Events & Stats

/mg events                      # Recent global activity
/mg events <collection_id>      # Collection-specific events
/mg stats                       # Global marketplace stats
/mg trending                    # Trending collections (24h)
/mg top collectors              # Top collectors (7d)
/mg top traders                 # Top traders (7d)

Shortcuts

/mg col1abc...                  # Quick collection lookup
/mg nft1abc...                  # Quick NFT lookup
/mg did:chia:...                # Quick profile lookup

Agent Usage

When users ask about Chia NFTs, collections, or MintGarden:

const { handleCommand } = require('./skills/mintgarden');

// Natural language → formatted response
const output = await handleCommand('show me trending collections');

The skill handles:

• Command parsing and normalization
• API calls with error handling
• Formatted text output (CLI/Telegram friendly)
• Pagination for large results

API Client

For custom integrations, use the API client directly:

const MintGardenAPI = require('./skills/mintgarden/lib/api');
const api = new MintGardenAPI();

// Search
const results = await api.search('zombie');
const nfts = await api.searchNFTs('rare', { limit: 50 });

// Collections
const collections = await api.getCollections({ sort: 'volume_7d' });
const collection = await api.getCollection('col1abc...');
const stats = await api.getCollectionStats('col1abc...');

// NFTs
const nft = await api.getNFT('nft1abc...');
const history = await api.getNFTHistory('nft1abc...');

// Profiles
const profile = await api.getProfile('username');
const profileNFTs = await api.getProfileNFTs('did:chia:...');

// Events
const events = await api.getEvents({ limit: 20 });
const trending = await api.getTrending({ period: '24h' });

// Stats
const globalStats = await api.getGlobalStats();
const topCollectors = await api.getTopCollectors({ period: '7d' });

Installation

cd skills/mintgarden
npm install
chmod +x cli.js
npm link  # Makes 'mg' and 'mintgarden' global

Configuration

No API key required — MintGarden API is public.

Optional: Set custom base URL via environment:

export MINTGARDEN_API_URL=https://api.mintgarden.io

Output Format

All commands return plain text suitable for:

• Terminal output (CLI)
• Telegram messages
• Discord messages
• WhatsApp messages

No markdown tables (for WhatsApp compatibility).

Error Handling

• Invalid IDs → Clear error message
• API failures → Retry-friendly error
• Network issues → Timeout after 30s
• Empty results → Helpful "not found" message

Limits

• Default limit: 50 results per query
• Max limit: 100 results per query
• No rate limiting (MintGarden is generous)
• Pagination available via API client

Examples

Find rare NFTs in a collection:

/mg collection nfts col1abc...

Check floor price:

/mg collection col1abc...

See what's hot:

/mg trending

Track a specific NFT:

/mg nft history nft1abc...

Monitor marketplace:

/mg events

Tips

• Use shortcuts for quick lookups (paste IDs directly)
• Collection IDs start with col1
• NFT launcher IDs start with nft1
• Profile DIDs start with did:chia:
• Trending updates every hour
• Volume stats use 7-day window by default

Support

• MintGarden API: https://api.mintgarden.io/docs
• Chia NFTs: https://mintgarden.io
• Bug reports: File in skill repository